Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e39362e302f32312d3231203d3e203238323230.roa
File: 3138372e38362e39362e302f32312d3231203d3e203238323230.roa (raw, json)
Hash identifier: FsqNMdW/nDMaZ4Ucbm9KG6Y0x74uKFBFqXBOTkqjtrQ=
Subject key identifier: 4C:8D:23:49:88:CC:DE:69:07:A3:39:03:8C:27:FF:A5:17:E0:D9:EF
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 6222F66BC226F055B024D5613E08D8B35532E797
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e39362e302f32312d3231203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:25 +0000
ROA not before: Mon 08 Apr 2024 20:00:25 +0000
ROA not after: Mon 07 Apr 2025 20:05:25 +0000
asID: 28220
IP address blocks: 187.86.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:22:f6:6b:c2:26:f0:55:b0:24:d5:61:3e:08:d8:b3:55:32:e7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:25 2024 GMT
Not After : Apr 7 20:05:25 2025 GMT
Subject: CN=4C8D234988CCDE6907A339038C27FFA517E0D9EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:77:12:24:3a:72:63:d8:5f:73:86:d5:3a:
03:9b:34:c5:63:62:f1:03:61:6d:51:45:27:f3:47:
d2:27:28:58:31:8f:4d:10:e2:ee:6a:99:a0:d1:2a:
66:fb:9e:a6:0b:d5:4e:12:41:8f:9c:9b:5e:0c:c7:
61:8e:cb:c2:f5:58:ba:83:a0:f9:f9:86:60:e5:6c:
b8:9f:d1:6d:7e:3d:bd:90:93:3a:1a:cc:b6:d2:e5:
79:66:11:e4:1c:c7:31:be:24:6d:a4:1d:c7:2e:a9:
61:e5:4e:e9:25:36:ab:b4:42:c6:48:ef:07:ec:ef:
00:21:70:17:9c:27:7c:e3:90:89:14:10:00:5e:8b:
a7:58:5e:05:2b:10:e6:82:cd:33:40:29:ad:81:9f:
61:58:4a:6c:95:3b:9a:f4:d7:67:7c:bf:37:78:74:
2c:f2:6a:d6:cd:a8:a4:f8:53:15:ba:43:46:d3:11:
89:70:a1:90:f2:6b:09:d1:a2:66:fb:2e:7d:51:5d:
45:87:93:1c:3d:4f:c0:a0:35:72:2d:0d:be:21:89:
c4:c9:3c:01:07:45:3e:46:c2:2c:e0:e9:75:fe:cc:
d0:5f:ef:0b:1e:dd:0d:85:f8:dd:d5:d3:7f:85:13:
96:2d:9c:e5:cd:fd:d8:c6:61:ae:5c:bd:bc:ec:86:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8D:23:49:88:CC:DE:69:07:A3:39:03:8C:27:FF:A5:17:E0:D9:EF
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3138372e38362e39362e302f32312d3231203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.86.96.0/21
Signature Algorithm: sha256WithRSAEncryption
01:d2:42:2f:34:4d:17:3a:90:53:61:b5:4f:2a:f4:98:95:f5:
98:f4:d5:9f:67:63:9a:9f:b3:bc:5f:bd:a5:83:81:d6:b6:d0:
ed:06:e7:8a:6d:f1:37:f1:ce:c8:12:8e:a2:bc:ad:b9:03:16:
ec:45:b0:f9:c0:80:f1:83:5b:f7:9e:bb:51:4f:9c:9c:54:f1:
11:fa:7c:8e:e6:62:7d:88:0b:d7:f8:89:82:d0:e7:0c:bc:26:
c8:86:4f:13:3f:ab:f4:95:71:e2:50:1e:85:66:12:70:ac:e7:
15:53:2c:88:39:75:95:54:f5:06:8a:46:38:65:f5:0f:c1:01:
e4:89:6e:15:56:c8:6d:3b:00:45:11:c0:a9:fd:cc:cb:d7:8c:
84:d2:ab:7f:4a:c6:f2:57:64:c7:92:a9:3b:4e:4d:72:92:5b:
33:c2:2d:e5:1c:6e:4e:5e:0a:11:ce:87:d3:7a:68:d3:0f:de:
3d:86:03:97:e6:a7:93:4a:34:09:0e:ec:17:c0:e3:c4:aa:f7:
c7:25:d7:cb:52:dd:77:87:bb:40:cb:1b:b8:2a:32:c7:88:1c:
87:ed:7e:ef:74:14:3c:d7:1f:4e:33:80:ee:ca:c9:ac:9b:be:
9c:20:f6:96:78:e1:e3:c9:83:fe:45:b7:dd:6d:8a:35:ad:fb:
b1:77:b0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:26 2025 by rpki-client